Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: p/VarFTTDYP2767WZ19VfmHbVaHl+H9zCNgfkouKT1U=
Subject key identifier: FE:21:2C:81:A2:44:5A:C8:46:82:DA:26:A7:2D:7B:EB:4D:07:A7:AA
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 019CADC7BFF30BCD3F6B3202363CAC1C7C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0B46
Signing time: Mon 02 Mar 2026 09:01:14 +0000
Manifest this update: Mon 02 Mar 2026 09:01:14 +0000
Manifest next update: Tue 03 Mar 2026 09:01:14 +0000
Files and hashes: 1: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: 5jjhgOR5uKGougHt4yBio7o51XXt8FQcuSg9cA67IJ4=)
2: QBd5Wpp5kWkoCSM4_95uiC5JDV0.roa (hash: flLVepDAjYfRnttnJvSS11YgDPxXUtJLpwyzAOjne3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:bf:f3:0b:cd:3f:6b:32:02:36:3c:ac:1c:7c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Mar 2 09:01:14 2026 GMT
Not After : Mar 3 09:01:14 2026 GMT
Subject: CN=fe212c81a2445ac84682da26a72d7beb4d07a7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:6b:60:85:d9:49:84:95:4b:fb:d4:d2:45:
59:57:6f:b9:f0:30:88:ff:12:a3:67:66:85:95:1c:
65:ee:0b:d0:b8:67:04:89:e5:1a:c7:b5:86:42:a3:
b5:c9:fa:2b:97:dc:d6:d8:d6:a3:a9:73:22:db:8d:
36:fc:18:40:ba:0a:d4:5b:71:06:11:fb:2a:2e:bd:
b0:db:da:e7:42:3d:6d:73:db:b7:8f:6b:ba:f6:29:
04:51:8c:ee:57:18:a3:38:21:0d:bd:4f:bd:38:d7:
e7:df:db:bf:4b:c7:6b:38:07:3f:3f:d4:5c:fc:0b:
43:de:f0:06:2a:cc:73:bb:6c:5d:a0:49:34:76:b6:
d1:a1:f3:fe:6b:40:3c:1f:23:35:08:a3:47:80:be:
11:7c:eb:c2:72:82:21:8f:66:01:a7:44:35:6c:27:
78:fb:49:d4:4d:3a:d7:b0:f6:15:ce:2a:a5:62:a1:
20:bb:e2:0d:50:7e:18:ac:a3:de:b1:2e:5c:36:12:
3f:03:bf:3e:8a:70:cf:5f:87:b2:e8:8c:42:fb:b4:
2f:e8:4c:df:1a:54:69:7f:7e:7c:5d:a6:e7:af:ac:
20:48:2a:bb:cd:2b:b5:04:32:21:fa:c6:a8:f5:65:
31:93:4a:fd:4c:dd:eb:b6:e8:4d:a4:0b:20:bb:d3:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:2C:81:A2:44:5A:C8:46:82:DA:26:A7:2D:7B:EB:4D:07:A7:AA
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:8b:60:41:a1:11:a5:5f:dc:e1:b5:06:bd:50:e3:da:2c:92:
fc:cb:34:67:98:b1:f9:89:ae:72:ba:46:50:7c:53:28:fc:7b:
c5:ea:80:6c:1a:42:5c:4a:c7:69:a8:c1:07:06:b3:71:d3:2f:
20:3c:bd:6e:db:1b:cc:c0:16:2f:d7:dd:7e:49:a7:3a:fa:68:
64:86:58:96:c3:33:3d:40:17:66:05:66:4a:b7:bd:d8:f9:7f:
a5:12:94:34:63:21:d9:93:66:7e:c8:c2:a7:9f:6e:26:37:dc:
b9:c3:85:f1:23:87:12:2e:c1:5b:91:a8:17:95:92:8b:5d:23:
ad:61:a0:e9:ba:58:c0:e1:e4:ab:56:7f:98:62:8d:a8:1c:a3:
69:44:40:8f:e8:a1:ab:3f:d3:92:1a:4f:49:e6:42:fe:9f:66:
4d:fc:c2:c8:26:bc:35:34:27:26:53:1a:b8:ba:79:2a:20:7b:
e7:6d:eb:c3:47:d8:04:a3:b5:2d:cb:b7:7f:4d:f7:80:39:94:
33:43:68:76:53:e0:7a:c6:9d:d1:b9:9b:ae:12:da:ea:a8:ad:
96:3d:f6:1d:d7:77:c2:6b:fd:d2:5e:0f:9a:c4:e6:7d:49:c6:
ff:0d:10:18:13:68:c0:38:d3:c4:46:f9:c2:74:b2:10:61:1a:
cc:e5:23:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:24 2026 by rpki-client